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EUS/GJ/P/08-7509 

Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1-24. (Cancelled) 

25. (Currently amended) A method of managing cooi<ies in a data 
processing system, said method comprising the steps of: 

a user agent requesting a resource associated with a cookie from a content 
provider; 

receiving a privacy policy associated with said cookie; and, 

said user agent transmitting, in response to reception of said privacy policy 
associated with said cookie, a cookie-policy receipt to said content provider, said 
cookie-policy receipt based only on a user decision, said user decision specifying 
whether a user associated with said user agent accepts that said content provider 
provides said cookie to user equipment associated with said user agent. 

26. (Previously Presented) The method according to claim 25, 
further comprising the step of including said cookie-policy receipt in a resource fetch 
message transmitted from said user agent to said content provider. 

27. (Currently amended) The method according to claim 25, 
wherein said user decision is determined by furth e r compr i sing th e st e ps of : 

said user agent comparing said privacy policy with a user preference, said user 
preference specifying a cookie privacy policy accepted by said user; and 

said user agent generating said cookie-policy receipt based on said comparison. 
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28. (Previously Presented) The method according to claim 27, 
wherein, if said received privacy policy does not match said user preference, said 
method further comprising the steps of: 

said user agent presenting said received privacy policy for said user on said user 
equipment; and 

said user agent generating, in response to a user-input signal, said cookie-policy 
receipt. 

29. (Currently amended) The method according to claim 25, 
wherein said user decision is determined bv furth e r compr i sing th e st e ps of : 

said user agent presenting said received privacy policy for said user on said user 
equipment; and 

said user agent generating, in response to a user-input signal, said cookie-policy 
receipt. 

30. (Previously Presented) The method according to claim 25, 
further comprising the step of authenticating said cookie-policy receipt with an 
authentication key associated with said user agent. 

31. (Previously Presented) The method according to claim 25, 
wherein, if said cookie-policy receipt specifies that said user does not accept that said 
content provider provides said cookie to said user equipment, said method comprising 
the step of removing said cookie associated with said requested resource from a 
storage memory in said user equipment. 

32. (Previously Presented) The method according to claim 25, 
wherein, if said cookie-policy receipt specifies that said user does not accept that said 
content provider provides said cookie to said user equipment, said method comprising 
the step of ignoring a cookie request command transmitted from said content provider to 
said user agent. 
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33. (Currently amended) A method of providing cookies in a data 
processing system, wherein a user agent requests a resource associated with a cookie 
from a content provider, said method comprising the steps of: 

receiving a resource request, wherein the resource is associated with a cookie from 
said content provider; 

transmitting a privacy policy associated with said cookie to said user agent; 

receiving a cookie-policy receipt based only on a user decision from said user 
agent; and, 

said content provider providing, in response to reception of said cookie-policy 
receipt from said user agent, said cookie to user equipment associated with said user 
agent if said cookie-policy receipt specifies that a user associated with said user agent 
accepts that said content provider provides said cookie to said user equipment. 

34. (Previously Presented) The method according to claim 33, 
wherein said cookie-policy receipt is received in a resource fetch message transmitted 
from said user agent. 

35. (Previously Presented) The method according to claim 33, 
wherein, if said cookie-policy receipt specifies that said user accepts that said content 
provider provides said cookie to said user equipment, said method comprising the step 
of providing said cookie-associated resource. 

36. (Previously Presented) The method according to claim 33, 
wherein said cookie-policy receipt is generated based on a comparison between said 
privacy policy and user preference that specifies a cookie privacy policy accepted by 
said user. 
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37. (Currently amended) A data processing system for requesting 
a resource associated with a cookie from a content provider, said data processing 
system comprising: 

a user agent, said user agent comprising: 

means for receiving a privacy policy associated with said cookie; and, 
means for transmitting, in response to reception of said privacy policy associated 
with said cookie, a cookie-policy receipt to said content provider, said cookie-policy 
receipt based only on a user decision, said user decision specifying whether a user 
associated with said user agent accepts that said content provider provides said cookie 
to user equipment associated with said user agent. 

38. (Previously Presented) The data processing system according 
to claim 37, wherein said transmitting means includes said cookie-policy receipt in a 
resource fetch message transmitted to said content provider. 

39. (Currently amended) The data processing system according 
to claim 37, furth er comprising means for determining the user decision, said means for 
determining fuilher comprising : 

means for comparing said privacy policy with a user preference, said user 
preference specifying a cookie privacy policy accepted by said user; and, 

means for generating, connected to said comparing means, said cookie-policy 
receipt as a function of said comparing of said privacy policy with said user preference. 

40. (Previously Presented) The data processing system according 
to claim 39, further comprising means for presenting said received privacy policy for 
said user on said user equipment if said privacy policy does not match said user 
preference, said generating means being adapted for generating said cookie-policy 
receipt in response to a user input signal. 
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41. (Currently amended) The data processing system according 
to claim 37, furth e r comprising means for determining the user decision, said means for 
determining further comprising : 

means for presenting said privacy policy for said user on said user equipment; 

and 

means for generating said cookie-policy receipt in response to a user input 

signal. 

42. (Previously Presented) The data processing system according 
to claim 37, further comprising means for authenticating said cookie-policy receipt with 
an authentication key associated with said user agent. 

43. (Previously Presented) The data processing system according 
to claim 37, further comprising means for removing a cookie associated with said 
requested resource from a storage in said user equipment if said cookie-policy receipt 
specifies that said user does not accept that said content provider provides said cookie 
to said user equipment. 

44. (Currently amended) A content provider apparatus adapted 
for providing a requested resource associated with a cookie to a user agent in a data 
processing system, said content provider apparatus comprising: 

means for receiving a resource request from said user agent; 

means for transmitting, in response to said resource request from said user 
agent, a privacy policy associated with said cookie to said user agent; 

means for receiving a cookie-policy receipt based only on a user decision ; and, 

means for providing, in response to said cookie-policy receipt transmitted from 
said user agent, said cookie to said user equipment associated with said user agent if 
said cookie-policy receipt specifies that a user associated with said user agent accepts 
that said content provider provides said cookie to said user equipment. 
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45. (Previously Presented) The content provider apparatus 
according to claim 44, wherein said cookie-policy receipt is received in a resource fetch 
message transmitted from said user agent. 

46. (Previously Presented) The content provider apparatus 
according to claim 44, further comprising means for providing said cookie-associated 
resource if said cookie-policy receipt specifies that said user accepts that said content 
provider provides said cookie to said user equipment. 

47. (Previously Presented) The content provider apparatus 
according to claim 44, wherein said cookie-policy receipt is generated based on a 
comparison between said privacy policy and user preference that specifies a cookie 
privacy policy accepted by said user. 

48. (Cancelled). 
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